Re: [PATCH v2] opkg recipe overhaul - removal of opkg-nogpg and opkg-nogpg-nocurl.

[Tom Rini <tom_rini@mentor.com>]

Koen Kooi wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 01-07-10 16:55, Enrico Scholz wrote:
>> Graham Gower <graham.gower@gmail.com> writes:
>>
>>> None of the distros in OE 
>> At least the openmoko SHR distribution fetches ipkg from network and
>> requires curl support hence.
> 
> That's not true, with curl disabled, it calls (busybox) wget.
> 
>>> appear to want/need gpg or curl support in opkg; so have opkg.inc
>>> remove them by default.
>> I do not think that supporting only offline mode (due to removal of
>> curl support) is a good idea.  Although the opportunistic signature
>> verification is not secure, it would be imo bad to remove gpg support
>> completely because updating embedded devices in a secure manner is
>> important.
>>
>> A better way might be to conditionalize your '--disable-*' options
>> resp. make them depend on some DISTRO_FEATURE.
> 
> Introducing USE flags would be a step backwards, so NAK on that.

Increasing (or decreasing...) USE flags, now there's a topic for the TSC...

-- 
Tom Rini
Mentor Graphics Corporation